DEV Community

Discussion on: Introduction to computer forensics

Collapse
 
samuelabreu profile image
Samuel Abreu • Edited

For data acquisition i recommend a forensic specific linux livecd, like caine-live.net/ or deftlinux.net/

Because on default settings linux distro usually don't mount storage as read-only, which it is a must on data acquisition.